$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: hyq0hSkFIDVWSRNVDkplMkm89EByn1Ccd0YX+pWj6Co= Subject key identifier: AC:ED:9D:6E:04:28:7A:5C:68:C4:25:5C:07:11:27:42:89:66:1F:89 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 01DC Signing time: Wed 25 Mar 2026 02:55:22 +0000 Manifest this update: Wed 25 Mar 2026 02:55:22 +0000 Manifest next update: Wed 01 Apr 2026 02:55:22 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: tNhyawjBfoxZILgD3VoIWidXQR4l9ycgvDosMWN1EJs=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: COaMid1PJ7sNLHUQ6+TBJQt8v3jAUBZ7JzL1Rm6+wuo=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: qiDIUEuwMcanplAnkX0trRydukOFcGtNb2ScPdRJPzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Mar 25 02:55:22 2026 GMT Not After : Apr 1 02:55:22 2026 GMT Subject: CN=69c34e9a-110e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:fa:7f:23:89:34:b9:59:4f:d1:e1:75:b5: c8:e4:e6:69:3d:e0:4b:ba:05:f4:2c:8e:00:3b:b7: 16:d9:69:d7:26:2a:3c:20:8b:5c:1a:e7:fa:c1:19: 8f:cf:b5:76:13:69:32:19:ea:fb:8f:ab:e6:50:ca: 39:31:0e:41:7d:0f:cd:20:8c:db:49:b5:8c:50:b4: d8:b3:4b:28:86:aa:7f:69:74:4f:be:ef:52:31:34: 34:8b:cc:da:99:4d:d2:98:f2:2c:31:88:d0:27:65: 10:44:b8:42:66:c6:7d:55:37:f7:52:4a:02:2c:e0: 5c:05:0d:83:c4:95:bc:d1:33:08:65:a1:74:e2:ff: 3e:47:c6:8a:51:ef:dc:b7:0b:42:c4:03:2b:e3:87: 68:78:3b:13:30:5e:0a:46:3f:3a:0f:ff:2e:3b:c8: 42:cf:96:d0:45:a7:d3:49:c0:07:be:b5:3a:c5:ed: 83:c8:02:35:50:36:c6:77:d5:9a:09:4b:4e:c2:d3: be:07:6e:a3:dd:2f:8a:00:00:b3:68:03:f5:4f:15: c9:46:a1:28:85:b4:17:e6:fd:03:a4:2c:fc:5d:f8: 7a:a2:2c:2c:99:26:26:da:9d:a6:43:b6:6c:83:95: e4:15:a2:d9:fc:26:36:7a:68:6b:4d:8c:3a:8c:0d: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:ED:9D:6E:04:28:7A:5C:68:C4:25:5C:07:11:27:42:89:66:1F:89 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:32:25:c6:68:b8:43:81:cf:c2:72:b9:8b:b5:ff:15:72:5c: 15:4f:44:55:fa:cb:d4:0a:d4:f4:30:b8:1c:f0:ce:35:f5:ff: c5:1b:eb:ba:4e:27:03:85:1f:c4:1b:69:75:68:32:13:65:bc: 4a:1b:a3:66:26:f9:2d:f6:8e:eb:bb:36:9e:35:3d:73:e4:b7: e4:4f:b0:77:fd:fb:9d:4f:c6:7c:1d:2f:fb:48:db:8e:fe:f6: e6:b6:c0:70:5f:cf:36:33:4d:fc:d5:5b:96:13:46:e7:95:70: f0:ba:35:66:36:75:d8:e6:02:3d:39:83:0a:87:38:c1:da:89: 26:b9:c7:2d:42:02:d7:1d:21:c6:ec:65:18:42:f1:81:3f:05: 17:5a:4f:9c:5a:32:89:1e:ce:2b:74:3e:d3:bf:a1:7b:e7:20: 46:c3:91:84:dc:d3:fe:05:1e:d8:46:93:20:4b:2c:56:b5:39: bd:73:3d:c2:e7:2f:bf:79:49:ba:08:82:9e:a1:41:e0:3a:57: 6c:40:48:61:09:e5:17:b4:fb:8a:af:b9:9d:c0:6d:f1:58:8b: 41:98:45:1d:51:92:c9:f1:ae:b4:e5:b0:84:12:b6:92:cb:66: 5a:c0:0a:a3:cd:f3:54:95:b9:ad:f9:94:02:1c:2d:1c:bc:0d: 6e:10:aa:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjYwMzI1MDI1NTIyWhcNMjYwNDAxMDI1NTIyWjAYMRYwFAYD VQQDEw02OWMzNGU5YS0xMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOf6fyOJNLlZT9HhdbXI5OZpPeBLugX0LI4AO7cW2WnXJio8IItcGuf6wRmP z7V2E2kyGer7j6vmUMo5MQ5BfQ/NIIzbSbWMULTYs0sohqp/aXRPvu9SMTQ0i8za mU3SmPIsMYjQJ2UQRLhCZsZ9VTf3UkoCLOBcBQ2DxJW80TMIZaF04v8+R8aKUe/c twtCxAMr44doeDsTMF4KRj86D/8uO8hCz5bQRafTScAHvrU6xe2DyAI1UDbGd9Wa CUtOwtO+B26j3S+KAACzaAP1TxXJRqEohbQX5v0DpCz8Xfh6oiwsmSYm2p2mQ7Zs g5XkFaLZ/CY2emhrTYw6jA38ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKztnW4E KHpcaMQlXAcRJ0KJZh+JMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADDIlxmi4Q4HPwnK5i7X/FXJcFU9EVfrL1ArU9DC4HPDONfX/xRvruk4nA4Uf xBtpdWgyE2W8ShujZib5LfaO67s2njU9c+S35E+wd/37nU/GfB0v+0jbjv725rbA cF/PNjNN/NVblhNG55Vw8Lo1ZjZ12OYCPTmDCoc4wdqJJrnHLUIC1x0hxuxlGELx gT8FF1pPnFoyiR7OK3Q+07+he+cgRsORhNzT/gUe2EaTIEssVrU5vXM9wucvv3lJ ugiCnqFB4DpXbEBIYQnlF7T7iq+5ncBt8ViLQZhFHVGSyfGutOWwhBK2kstmWsAK o83zVJW5rfmUAhwtHLwNbhCqlw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:09:36 2026 by rpki-client